CVE-2024-21846

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.cgi gateway, resulting in a denial-of-service scenario.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-306

Affected software

Vendor	Product	Versions
Electrolink	Compact DAB Transmitter	10W; 100W; 250W
Electrolink	Medium DAB Transmitter	500W; 1kW; 2kW
Electrolink	High Power DAB Transmitter	2.5kW; 3kW; 4kW; 5kW
Electrolink	Compact FM Transmitter	Compact FM Transmitter; 500W; 1kW; 2kW
Electrolink	Modular FM Transmitter	3kW; 5kW; 10kW; 15kW; 20kW; 30kW
Electrolink	Digital FM Transmitter	>= 15W, <= 40kW
Electrolink	VHF TV Transmitter	BI; BIII
Electrolink	UHF TV Transmitter	>= 10W, <= 5kW
electrolink	compact dab transmitter	10w; 100w; 250w
electrolink	medium dab transmitter	500w; 1kw; 2kw
electrolink	high power dab transmitter	2.5kw; 3kw; 4kw; 5kw
electrolink	compact fm transmitter	500w; 1kw; 2kw
electrolink	modular fm transmitter	3kw; 5kw; 10kw; 15kw; 20kw; 30kw
electrolink	digital fm transmitter	>= 15w, <= 40kw
electrolink	vhf tv transmitter	bi; biii
electrolink	uhf tv transmitter	>= 10w, <= 5kw

References

Timeline

Published: Apr 18, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-218483.1Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to kee CVE-2024-218497.5When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traf CVE-2024-21855.4The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Box widget in all versio CVE-2024-218506.0Sensitive information in resource not removed before reuse in some Intel(R) TDX Seamldr module software before version 1.5.02.00 may allow a CVE-2024-218517.8in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.CVE-2024-218528.8In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zi CVE-2024-218534.7Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors may allow an authoriz CVE-2024-218559.8A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to ar CVE-2024-218576.7Uncontrolled search path for some Intel(R) oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially ena CVE-2024-218595.3Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable information CVE-2024-21865.4The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Team Members widget in all ver CVE-2024-218608.8in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free.